Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231382e302f32332d3233203d3e20323633353733.roa
File:                     3137372e3138342e3231382e302f32332d3233203d3e20323633353733.roa (raw, json)
Hash identifier:          QNG1vH+rxMOsFd5TzdmDJ8Sc0Oc92Ks7pBqUuoNOJUg=
Subject key identifier:   DC:DC:78:C1:B5:C7:4C:EA:E7:6B:5B:0D:C1:72:2F:93:F8:1F:BA:6F
Certificate issuer:       /CN=A45DD70E2EF647983066A1251557308D780CDF5E
Certificate serial:       1B9FC798FC5B6025DF557052823DF4F890A25CD2
Authority key identifier: A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231382e302f32332d3233203d3e20323633353733.roa
Signing time:             Wed 12 Jul 2023 14:20:27 +0000
ROA not before:           Wed 12 Jul 2023 14:15:27 +0000
ROA not after:            Wed 10 Jul 2024 14:20:27 +0000
asID:                     263573
IP address blocks:        177.184.218.0/23 maxlen: 23

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:9f:c7:98:fc:5b:60:25:df:55:70:52:82:3d:f4:f8:90:a2:5c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Validity
            Not Before: Jul 12 14:15:27 2023 GMT
            Not After : Jul 10 14:20:27 2024 GMT
        Subject: CN=DCDC78C1B5C74CEAE76B5B0DC1722F93F81FBA6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:85:93:ca:8a:30:0d:d3:04:a8:6e:dc:6f:
                    81:60:08:92:92:76:48:a6:14:1b:ff:2e:16:e2:49:
                    1d:d4:11:14:e7:ae:30:3d:09:a8:4d:0e:57:c8:c8:
                    ab:2a:6d:70:46:90:6d:c4:f4:4a:84:26:1d:4f:c0:
                    45:fe:f5:60:a7:8d:b3:2d:65:30:96:94:c2:03:8b:
                    21:4e:2e:a9:7b:fe:f2:13:9e:e8:aa:8b:71:47:67:
                    87:5e:43:75:3b:dc:6a:e0:44:48:55:2a:48:e4:14:
                    b1:57:96:3a:58:93:c6:3d:ef:82:6d:59:6a:7a:c4:
                    ac:82:1a:18:6c:79:b5:b6:b6:cc:3b:28:b3:4b:b0:
                    6c:2d:b3:12:0f:13:6a:3f:33:9a:b1:c4:24:3a:f9:
                    c3:b8:2d:10:c5:af:d8:2d:a6:e3:80:4a:fb:47:97:
                    a7:9f:fc:a6:ac:6f:62:68:6d:d3:e2:e5:02:e2:63:
                    ad:b8:41:f7:fe:50:7f:e1:ee:2d:aa:99:21:44:1e:
                    9b:c6:ab:63:90:c2:2d:12:52:02:1c:1f:62:4c:c4:
                    66:84:40:12:14:ac:17:9b:60:3b:e2:b1:77:6d:05:
                    ee:63:25:2c:f5:70:f8:b9:a3:42:84:cb:b7:aa:b2:
                    1e:9e:f6:c2:9d:5b:04:c8:e8:66:fa:3a:84:35:f9:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DC:78:C1:B5:C7:4C:EA:E7:6B:5B:0D:C1:72:2F:93:F8:1F:BA:6F
            X509v3 Authority Key Identifier:
                keyid:A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/3137372e3138342e3231382e302f32332d3233203d3e20323633353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:55:6a:bd:49:ce:5c:30:79:f7:bf:93:9e:c0:3e:9c:02:c8:
         67:08:02:40:d7:cc:54:bb:92:c4:dd:ab:fe:6e:f3:a4:19:f6:
         4a:4b:29:3d:02:e0:02:98:db:eb:7a:11:89:d1:5d:61:18:ca:
         87:6d:c3:2a:3c:be:3c:cb:02:b8:de:62:46:99:d4:c0:89:01:
         fc:5d:4f:7b:be:72:96:26:31:93:27:bc:6b:06:43:af:d1:cc:
         5c:ac:d4:e2:8a:63:2f:14:32:d6:64:07:ab:d2:8b:43:fd:78:
         6e:94:c9:a0:92:af:30:75:ce:11:1b:b8:e0:cd:fc:1c:ec:4c:
         96:0f:5e:67:1e:6c:13:7a:3d:0b:60:37:02:b3:fe:3d:f2:36:
         f3:9d:15:a9:c8:04:94:7a:b0:1d:90:bd:d1:78:5b:a2:62:52:
         b2:58:72:f0:f0:42:c4:6b:27:e4:41:b1:9c:d4:59:22:74:e9:
         0e:f9:15:b8:c9:64:b7:c1:c5:99:9a:af:70:1c:1f:9f:f6:21:
         79:8d:88:3c:9c:74:db:a2:8b:f1:21:6f:5a:5e:36:c3:ae:1f:
         aa:f7:1d:bf:28:8f:64:33:33:4a:5a:1c:d9:d4:42:2f:e5:d1:
         fc:cd:1c:1c:1c:63:bf:9e:33:c4:27:d3:b4:fd:44:7e:95:4c:
         d6:9b:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:23 2023 by rpki-client on console-ams.rpki-client.org